Explicitly disable storage blob public access for workspace templates

This commit is contained in:
Joshua Loeffler 2022-11-17 11:03:43 -05:00
parent 96afa1f2cd
commit fb2d3928a9
3 changed files with 3 additions and 0 deletions

View File

@ -21,6 +21,7 @@ resource "azurerm_storage_account" "default" {
resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard"
account_replication_type = "GRS"
allow_nested_items_to_be_public = false
}
resource "azurerm_container_registry" "default" {

View File

@ -26,6 +26,7 @@ resource "azurerm_storage_account" "default" {
resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard"
account_replication_type = "GRS"
allow_nested_items_to_be_public = false
network_rules {
default_action = "Deny"

View File

@ -27,6 +27,7 @@ resource "azurerm_storage_account" "default" {
resource_group_name = azurerm_resource_group.default.name
account_tier = "Standard"
account_replication_type = "GRS"
allow_nested_items_to_be_public = false
network_rules {
default_action = "Deny"